Critical Null Pointer Dereference in Linux Kernel Package: linux - CVE-2025-38155
Summary
DEBIAN-CVE-2025-38155: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() devm_ioremap() returns NULL on error. Affects linux versions < 6.12.35-1. Fixed in 6.12.35-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It is widely used in various distributions, including Debian. The kernel's functionality includes process management, memory management, device drivers, and system calls. However, like any complex software, it is susceptible to vulnerabilities that can compromise system stability and security.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the mt7915 driver related to the handling of memory mapping. Specifically, the function mt7915_mmio_wed_init() does not adequately check for errors when calling devm_ioremap(). If this function fails, it returns NULL, leading to a null pointer dereference. This can cause system crashes or unexpected behavior, potentially allowing an attacker to exploit the flaw for malicious purposes.
How To Fix
Minimum fixed version
6.12.35-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned to mitigate this vulnerability other than applying the patch. It is recommended to monitor the system for any unusual behavior until the update can be applied.
Conclusion
The vulnerability CVE-2025-38155 in the Linux kernel poses a significant risk due to a null pointer dereference in the mt7915 driver. Users are advised to update to the patched version to mitigate potential threats. Regular monitoring and timely updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38155 is a vulnerability in the Linux kernel related to a null pointer dereference in the mt7915 driver.
This vulnerability can lead to system crashes or unexpected behavior, which may be exploited by attackers.
Yes, the patched version of the linux package is 6.12.35-1.
You can check if your application is affected by using the Vulert playground at Vulert Scanner without any signup.
If you cannot update immediately, monitor your system for unusual behavior and apply the patch as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
